Skip to content

docs: add ownCloud Classic 11.1 and release notes for 11.1.0 and 10.16.7 - #174

Merged
oc-tmueller merged 6 commits into
mainfrom
docs/server-11-1-0-and-10-16-7
Nov 3, 2026
Merged

oc-tmueller merged 6 commits into
mainfrom
docs/server-11-1-0-and-10-16-7

Conversation

@oc-tmueller

Copy link
Copy Markdown
Contributor

Summary

  • New content/server/11.1: a copy of 11.0, now latest. 11.0 stays published. Registered in go-redirect.js PUBLISHED_VERSIONS, the go-redirect test loop, sync/manifest.yml and the README. previous-server-version stays 10.16, the previous maintained line.
  • 11.1 account lockout docs: a new Account Lockout page (Security section), occ user:unlock in the user commands, and config_sample_php_parameters.adoc regenerated from core master (11.1.0), which adds the four account_lockout.* keys. The example occ version output now shows 11.1.0.
  • Release notes: short 11.1.0 section with one bullet on the lockout (feat: temporarily lock out local accounts after failed logins core#41805, feat: add occ user:unlock to lift an account lockout early core#41936), and a 10.16.7 section in the 10.16 group. The 11.0 page aliases are kept now that latest is 11.1.
  • Docker: the 10.16 page pins 10.16.7. The 11.0 page now pins 11.0.1 as a page attribute: it used the global latest-server-download-version, which moves to 11.1.0, and playbook attributes cannot be overridden per component.

Read the diff commit by commit: the first commit is the verbatim 11.0 → 11.1 copy, with only antora.yml's version key changed.

Merge only after the images exist

owncloud/server:11.1.0 and owncloud/server:10.16.7 are not on Docker Hub yet. They come from owncloud-docker/server#753 and #752. Until those are merged, the install pages point at tags that do not exist.

Verification

  • npm run antora && npm test: 72 pass, 0 fail, 1 skip (it needs a prerelease server line, of which there is none).
  • config-to-docs is a no-op on 11.0 against v11.0.1. For 11.1 against master, the diff is only the account_lockout.* block.
  • Rendered: /server/latest/ → 11.1. The 11.0 docker page shows 11.0.1 everywhere, 11.1 shows 11.1.0 and 10.16 shows 10.16.7. Every new xref and anchor resolves.
  • Lockout page statements checked against core AccountLockout, Session and user:unlock.

🤖 Generated with Claude Code

oc-tmueller and others added 4 commits November 3, 2026 14:14
Copy content/server/11.0 to 11.1 unchanged except for the antora.yml
version key, and make 11.1 the latest server version. 11.0 stays
published.

Register the new tree in go-redirect's PUBLISHED_VERSIONS and in the
test's version loop, and record it in the manifest and the README.
previous-server-version stays at 10.16, the previous maintained line.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
11.1.0 temporarily locks local accounts after repeated failed logins,
enabled by default, and adds occ user:unlock to lift a lockout early.

Add an Account Lockout page to the 11.1 security section, the
user:unlock command to the user commands, and regenerate the 11.1
config.sample.php page from core master (11.1.0), which adds the four
account_lockout.* keys. Bump the example version output in the occ
pages to 11.1.0.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Add the 11.1.0 and 10.16.7 sections to the release notes, keep the
11.0 page aliases now that latest moved to 11.1, and point the 10.16
docker installation page at the 10.16.7 image.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
The 11.0 docker page took its image tag from the global
latest-server-download-version, so moving latest to 11.1.0 told 11.0
readers to install 11.1. Pin it on the page, as 10.16 does; playbook
attributes cannot be overridden per component.

Make the lockout page match core: OpenID Connect accounts are
auto-provisioned into the built-in backend and are counted, endpoints
other than the login form and WebDAV report a lockout like a wrong
password, unknown names only look like local accounts, and an email
shared by several accounts is not resolved by occ user:unlock.

Use the full user:unlock description in the occ list output, and move
the 10.16.7 section to the 10.16 group of the release notes.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@oc-tmueller
oc-tmueller requested a review from a team as a code owner November 3, 2026 13:23
@mmattel

mmattel commented Nov 3, 2026

Copy link
Copy Markdown
Contributor

Thanks, will review tomorrow morning, 59k changes...

The 11.1.0 and 10.16.7 release notes now cover the installer's app
package signature verification (core#41955, #41959), which rejects
unsigned or ambiguously packaged apps where code signing is enforced.

The 11.0 and 11.1 Secure View links resolve within their own version.
current-server-version is a playbook attribute and now points 11.0 at
11.1.

The lockout page no longer says external backend accounts are never
locked: a login name that is not the ownCloud user name, such as an
LDAP email address, is counted like an unknown name. A successful login
with the user name does not reset the email address counter.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com>
Comment thread global-attributes.yml Resolved
The 11.1 installation page and its dot.env example rendered the image tag
from the global latest-server-download-version, so the next global bump
would silently change the documented 11.1 image. Pin it with a page-local
docker-image-version, as the 11.0 page already does.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Signed-off-by: Thomas Müller <323649642+oc-tmueller@users.noreply.github.com>
@oc-tmueller
oc-tmueller merged commit 6d64087 into main Nov 3, 2026
6 checks passed
@oc-tmueller
oc-tmueller deleted the docs/server-11-1-0-and-10-16-7 branch November 3, 2026 15:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants